In the Linux kernel, the following vulnerability has been resolved:
scsi: qla2xxx: Fix bsg_done() causing double free
Kernel panic observed on system,
[5353358.825191] BUG: unable to handle page fault for address: ff5f5e897b024000 [5353358.825194] #PF: supervisor write access in kernel mode [5353358.825195] #PF: error_code(0x0002) - not-present page [5353358.825196] PGD 100006067 P4D 0 [5353358.825198] Oops: 0002 [#1] PREEMPT SMP NOPTI [5353358.825200] CPU: 5 PID: 2132085 Comm: qlafwupdate.sub Kdump: loaded Tainted: G W L ------- --- 5.14.0-503.34.1.el9_5.x86_64 #1 [5353358.825203] Hardware name: HPE ProLiant DL360 Gen11/ProLiant DL360 Gen11, BIOS 2.44 01/17/2025 [5353358.825204] RIP: 0010:memcpy_erms+0x6/0x10 [5353358.825211] RSP: 0018:ff591da8f4f6b710 EFLAGS: 00010246 [5353358.825212] RAX: ff5f5e897b024000 RBX: 0000000000007090 RCX: 0000000000001000 [5353358.825213] RDX: 0000000000001000 RSI: ff591da8f4fed090 RDI: ff5f5e897b024000 [5353358.825214] RBP: 0000000000010000 R08: ff5f5e897b024000 R09: 0000000000000000 [5353358.825215] R10: ff46cf8c40517000 R11: 0000000000000001 R12: 0000000000008090 [5353358.825216] R13: ff591da8f4f6b720 R14: 0000000000001000 R15: 0000000000000000 [5353358.825218] FS: 00007f1e88d47740(0000) GS:ff46cf935f940000(0000) knlGS:0000000000000000 [5353358.825219] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [5353358.825220] CR2: ff5f5e897b024000 CR3: 0000000231532004 CR4: 0000000000771ef0 [5353358.825221] PKRU: 55555554 [5353358.825222] Call Trace: [5353358.825223] <TASK> [5353358.825224] ? show_trace_log_lvl+0x1c4/0x2df [5353358.825229] ? show_trace_log_lvl+0x1c4/0x2df [5353358.825232] ? sg_copy_buffer+0xc8/0x110 [5353358.825236] ? __die_body.cold+0x8/0xd [5353358.825238] ? page_fault_oops+0x134/0x170 [5353358.825242] ? kernelmode_fixup_or_oops+0x84/0x110 [5353358.825244] ? exc_page_fault+0xa8/0x150 [5353358.825247] ? asm_exc_page_fault+0x22/0x30 [5353358.825252] ? memcpy_erms+0x6/0x10 [5353358.825253] sg_copy_buffer+0xc8/0x110 [5353358.825259] qla2x00_process_vendor_specific+0x652/0x1320 [qla2xxx] [5353358.825317] qla24xx_bsg_request+0x1b2/0x2d0 [qla2xxx]
Most routines in qla_bsg.c call bsg_done() only for success cases. However a few invoke it for failure case as well leading to a double free. Validate before calling bsg_done().
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-debug-modules-extraUpgrade kernel-modules-extraUpgrade kernel-debug-develUpgrade kernel-tools-libsUpgrade kernel-coreUpgrade kernel-debugUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdumpUpgrade kernel-headersUpgrade kernel-rt-modulesUpgrade kernel-debug-modulesUpgrade kernel-develUpgrade kernel-rt-debug-develUpgrade kernel-rt-debugUpgrade kernel-debug-modules-extraUpgrade kernel-docUpgrade kernel-rt-debug-modulesUpgrade kernel-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-develUpgrade kernel-debug-coreUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernelUpgrade kernel-rt-debug-coreUpgrade kernel-rt-coreUpgrade perfUpgrade kernel-rtUpgrade kernel-cross-headersUpgrade python3-perfUpgrade kernel-rt-modules-extraUpgrade bpftoolUpgrade kernel-zfcpdump-coreUpgrade kernel-tools-libs-devel | Apr 7, 2026 | Apr 6, 2026 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfoUpgrade perfUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-toolsUpgrade kernel-tools-develUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.10.251-248.983Upgrade bpftool-debuginfoUpgrade python-perf | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade bpftoolUpgrade python3-perf-debuginfoUpgrade kernel-tools-develUpgrade kernelUpgrade kernel-modules-extra-commonUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-staticUpgrade python3-perfUpgrade kernel-libbpf-develUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpfUpgrade kernel-modules-extraUpgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade kernel-libbpf-debuginfoUpgrade perfUpgrade kernel-livepatch-6.1.164-196.303Upgrade kernel-debuginfoUpgrade kernel-tools | Mar 27, 2026 | Mar 4, 2026 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Mar 16, 2026 | Mar 16, 2026 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Mar 25, 2026 | Mar 4, 2026 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Mar 31, 2026 | Mar 4, 2026 |
| Rocky_linux | — | Upgrade kernel-debug-uki-virtUpgrade kernel-coreUpgrade kernel-rt-modulesUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-rt-debug-modules-coreUpgrade kernel-modules-extra-matchedUpgrade kernel-rt-develUpgrade kernel-rt-kvmUpgrade rtlaUpgrade kernel-zfcpdump-develUpgrade python3-perf-debuginfoUpgrade kernel-uki-virtUpgrade kernel-debug-modulesUpgrade bpftoolUpgrade kernel-rt-debug-debuginfoUpgrade kernel-modules-extraUpgrade kernel-debugUpgrade kernel-rt-debugUpgrade kernel-rt-debug-kvmUpgrade kernel-develUpgrade kernel-modules-coreUpgrade kernel-debug-modules-extraUpgrade kernel-debug-modules-coreUpgrade kernel-debug-develUpgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdumpUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-rt-coreUpgrade kernel-debug-debuginfoUpgrade kernel-debug-coreUpgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-zfcpdump-modules-extraUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-toolsUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-devel-matchedUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-debuginfoUpgrade perf-debuginfoUpgrade kernel-zfcpdump-modulesUpgrade libperf-debuginfoUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-modules-coreUpgrade kernel-debuginfo-common-s390xUpgrade python3-perfUpgrade kernel-debug-devel-matchedUpgrade kernel-uki-virt-addonsUpgrade kernel-rtUpgrade kernel-zfcpdump-coreUpgrade libperfUpgrade kernelUpgrade perfUpgrade kernel-rt-modules-extraUpgrade rv | Apr 10, 2026 | Apr 9, 2026 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1104-intel-iot-realtimeUpgrade linux-image-5.15.0-1112-aws-fipsUpgrade linux-image-6.8.0-134-lowlatency-64kUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oem-20.04cUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-azure-fips-6.8Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-raspi-realtimeUpgrade linux-image-6.8.0-136-genericUpgrade linux-image-5.15.0-1106-raspiUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-ibmUpgrade linux-image-6.8.0-1032-xilinxUpgrade linux-image-6.8.0-1060-awsUpgrade linux-image-nvidiaUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-generic-6.8Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-fips-6.8Upgrade linux-image-intelUpgrade linux-image-virtualUpgrade linux-image-5.15.0-184-lowlatencyUpgrade linux-image-5.15.0-1095-gkeopUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-aws-64k-6.8Upgrade linux-image-aws-lts-22.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-5.15.0-1117-azureUpgrade linux-image-5.15.0-1117-azure-fdeUpgrade linux-image-6.8.0-1063-gcp-fipsUpgrade linux-image-6.8.0-1058-nvidia-lowlatency-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oem-20.04bUpgrade linux-image-generic-lpaeUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.8.0-1058-gkeUpgrade linux-image-azure-fipsUpgrade linux-image-5.15.0-1112-gcpUpgrade linux-image-6.8.0-134-fipsUpgrade linux-image-oem-20.04Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-gke-5.15Upgrade linux-image-oracleUpgrade linux-image-5.15.0-184-lowlatency-64kUpgrade linux-image-5.15.0-186-genericUpgrade linux-image-5.15.0-186-generic-64kUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1060-raspiUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1060-aws-fipsUpgrade linux-image-5.15.0-1064-nvidia-tegra-rtUpgrade linux-image-kvm-5.15Upgrade linux-image-gcpUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-xilinxUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1058-nvidiaUpgrade linux-image-5.15.0-1112-awsUpgrade linux-image-6.8.0-1045-gkeopUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-azure-6.8Upgrade linux-image-6.8.0-1063-gcp-64kUpgrade linux-image-ibm-classicUpgrade linux-image-aws-64kUpgrade linux-image-5.15.0-1053-nvidia-tegra-igx-rtUpgrade linux-image-kvmUpgrade linux-image-fips-5.15Upgrade linux-image-6.8.0-2049-raspi-realtimeUpgrade linux-image-aws-5.15Upgrade linux-image-6.8.0-1062-azure-fipsUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1107-intel-iotgUpgrade linux-image-5.15.0-1112-aws-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-aws-fips-6.8Upgrade linux-image-nvidia-tegraUpgrade linux-image-oem-20.04dUpgrade linux-image-oem-22.04aUpgrade linux-image-azure-lts-24.04Upgrade linux-image-5.15.0-1111-realtimeUpgrade linux-image-gcp-6.8Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-lowlatencyUpgrade linux-image-ibm-6.8Upgrade linux-image-aws-fipsUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-generic-64kUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gke-64k-6.8Upgrade linux-image-6.8.0-1029-nvidia-tegra-rtUpgrade linux-image-5.15.0-1109-oracleUpgrade linux-image-5.15.0-1075-xilinx-zynqmpUpgrade linux-image-6.8.0-1058-gke-64kUpgrade linux-image-5.15.0-186-fipsUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.8.0-134-genericUpgrade linux-image-6.8.0-134-lowlatencyUpgrade linux-image-azureUpgrade linux-image-6.8.0-1063-gcpUpgrade linux-image-laptop-23.10Upgrade linux-image-6.8.1-1055-realtimeUpgrade linux-image-virtual-6.8Upgrade linux-image-nvidia-5.15Upgrade linux-image-generic-64k-5.15Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-azure-fips-5.15Upgrade linux-image-6.8.0-1060-ibmUpgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-azure-fde-5.15Upgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1106-ibmUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-gkeopUpgrade linux-image-gke-6.8Upgrade linux-image-5.15.0-186-generic-lpaeUpgrade linux-image-5.15.0-1108-gkeUpgrade linux-image-5.15.0-1107-nvidiaUpgrade linux-image-oracle-5.15Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-6.8.0-134-generic-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-azure-5.15Upgrade linux-image-awsUpgrade linux-image-virtual-5.15Upgrade linux-image-5.15.0-1104-kvmUpgrade linux-image-raspi-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oracle-6.8Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-azure-fde-6.8Upgrade linux-image-aws-64k-5.15Upgrade linux-image-6.8.0-136-generic-64kUpgrade linux-image-6.8.0-1058-nvidia-64kUpgrade linux-image-6.8.0-1057-oracleUpgrade linux-image-5.15.0-1053-nvidia-tegra-igxUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-xilinx-6.8Upgrade linux-image-lowlatency-6.8Upgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-fipsUpgrade linux-image-5.15.0-1117-azure-fipsUpgrade linux-image-5.15.0-1112-gcp-fipsUpgrade linux-image-5.15.0-1107-nvidia-lowlatencyUpgrade linux-image-5.15.0-1064-nvidia-tegraUpgrade linux-image-raspi-5.15Upgrade linux-image-raspiUpgrade linux-image-ibm-5.15Upgrade linux-image-raspi-nolpaeUpgrade linux-image-6.8.0-1029-nvidia-tegraUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-1062-azure-fdeUpgrade linux-image-6.8.0-1060-aws-64kUpgrade linux-image-6.8.0-1058-nvidia-lowlatencyUpgrade linux-image-realtimeUpgrade linux-image-oem-22.04cUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-gke-64kUpgrade linux-image-generic-5.15Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-realtime-6.8.1Upgrade linux-image-gcp-5.15Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1063-azureUpgrade linux-image-oem-22.04Upgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-lowlatency-5.15Upgrade linux-image-gkeop-5.15Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-genericUpgrade linux-image-aws-fips-5.15Upgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-1057-oracle-64kUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-realtime-5.15Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-gcp-fipsUpgrade linux-image-azure-lts-22.04 | Jul 2, 2026 | Jul 1, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Mar 4, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub